- List
- Wassenaar Arrangement – List of Dual-Use Goods and Technologies – WA-LIST (25) 1
- Corresponding EU entry
- 5A004
a. Designed or modified to perform 'cryptanalytic functions'.
Note 5.A.4.a. includes systems or equipment, designed or modified to perform 'cryptanalytic functions' by means of reverse engineering.
Technical Note
For the purposes of 5.A.4.a., 'cryptanalytic functions' are functions designed to defeat cryptographic mechanisms in order to derive confidential variables or sensitive data, including clear text, passwords or cryptographic keys.
b. Items, not specified in 4.A.5. or 5.A.4.a., designed to perform all of the following:
1. 'Extract raw data' from a computing or communications device; and
2. Circumvent "authentication" or authorisation controls of the device, in order to perform the function described in 5.A.4.b.1.
Technical Note
For the purposes of 5.A.4.b.1., 'extract raw data' from a computing or communications device means to retrieve binary data from a storage medium, e.g., RAM, flash or hard disk, of the device without interpretation by the device's operating system or filesystem.
Note 1 5.A.4.b. does not apply to systems or equipment specially designed for the "development" or "production" of a computing or communications device.
Note 2 5.A.4.b. does not include:
a. Debuggers, hypervisors;
b. Items limited to logical data extraction;
c. Data extraction items using chip-off or Joint Test Action Group (JTAG); or
d. Items specially designed and limited to jail-breaking or rooting.
5. B. Part 2. TEST, INSPECTION AND PRODUCTION EQUIPMENT
Note 5.A.4.a. includes systems or equipment, designed or modified to perform 'cryptanalytic functions' by means of reverse engineering.
Technical Note
For the purposes of 5.A.4.a., 'cryptanalytic functions' are functions designed to defeat cryptographic mechanisms in order to derive confidential variables or sensitive data, including clear text, passwords or cryptographic keys.
b. Items, not specified in 4.A.5. or 5.A.4.a., designed to perform all of the following:
1. 'Extract raw data' from a computing or communications device; and
2. Circumvent "authentication" or authorisation controls of the device, in order to perform the function described in 5.A.4.b.1.
Technical Note
For the purposes of 5.A.4.b.1., 'extract raw data' from a computing or communications device means to retrieve binary data from a storage medium, e.g., RAM, flash or hard disk, of the device without interpretation by the device's operating system or filesystem.
Note 1 5.A.4.b. does not apply to systems or equipment specially designed for the "development" or "production" of a computing or communications device.
Note 2 5.A.4.b. does not include:
a. Debuggers, hypervisors;
b. Items limited to logical data extraction;
c. Data extraction items using chip-off or Joint Test Action Group (JTAG); or
d. Items specially designed and limited to jail-breaking or rooting.
5. B. Part 2. TEST, INSPECTION AND PRODUCTION EQUIPMENT